vysecurity/CVE-2017-8759

Stars
174
Rank 219,104 (Top 5 %)
Language
Created about 7 years ago
Updated almost 2 years ago

vysecurity/CVE-2017-8759

vysecurity

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.

CVE-2017-8759 Weaponisation PoC

This repository contains data that can be used to weaponise the CVE-2017-8759 vulnerability.

For full information visit https://www.mdsec.co.uk/blog/ to find the post related to this vulnerability.

As always, my research is aimed to help the community become more aware of rising threats as well as the adversary simulation community to better simulate realistic threats against our client base in order to better educate and inform them. My research should not be used against a target without prior consent.

Video for weaponisation can be found at https://www.youtube.com/watch?v=hlkx5uYBT1Y

Credits

Credits to myself, Vincent Yiu @vysecurity for the weaponisation in RTF form with no interaction required. Credits to @voulnet for the exploit.txt.

RedTips

Red Team Tips as posted by @vysecurity on Twitter

LinkedInt

LinkedIn Recon Tool

DomLink

A tool to link a domain with registered organisation names and emails, to other domains.

DomainFrontingLists

A list of Domain Frontable Domains by CDN

morphHTA

morphHTA - Morphing Cobalt Strike's evil.HTA

ANGRYPUPPY

Bloodhound Attack Path Automation in CobaltStrike

IPFuscator

IPFuscator - A tool to automatically generate alternative IP representations

Aggressor-VYSEC

ps1-toolkit

Obfuscated Penetration Testing PowerShell scripts

genHTA

Generates anti-sandbox analysis HTA files without payloads

CVE-2018-4878

Aggressor Script to launch IE driveby for CVE-2018-4878

checkO365

checkO365 is a tool to check if a target domain is using O365

CobaltSplunk

Splunk Dashboard for CobaltStrike logs

ATT-CK_Analysis

Repository for my ATT&CK analysis research.

FSharp-Shellcode

F# Implementation to spawn shellcode

Invoke-ProcessScan

Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.

AzureAppC2

A script that can be deployed to Azure App for C2 / Proxy / Redirector

basicAuth

Basic Auth Phish page

ShellcodeConversion

A collection of shell code conversion scripts that I have written over time for repetitive tasks

RDPInception

A script to attack users who are RDPing into a machine and recurse this attack. For security testers and attack simulations.

Office365TenantsList

Office365 Tenants List

WindfarmDynamite-CNA

CobaltStrike Aggressor Script to utilise FuzzySec's Windows Notification Framework Research to Spawn a Shell under Explorer.exe

EmpireAMSI

DoH-Servers

DNS over HTTPS Servers

BadIP

Bad Security Vendor IPs

wepwnise

A generator to weaponize Macro payloads that can evade EMET and utilises native VB migration.

PWNDB

autovpn

Easily connect to a VPN in a country of your choice

CloudServiceLists

Tenants list for each cloud service.

CVE-2020-0796

CVE-2020-0796 - Working PoC - 20200313

vysecurity

PacketParser

A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.

SCTPersistence

Create COM Objects backed by Scripts, not DLLs

nuclei-templates-notags

CVE-2021-40444

DriverVulnCheck

Takes Bruteratel `drivers` output and checks it against loldrivers.io

Linkedin_Connect_NEWUI

A Python Script that controls Selenium to automate the process of connecting on LinkedIn

malleable-profiles

IIS_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

test-conf

Archive

vysecurity.github.io

DomainFrontingProxies

A list of Domain Fronting Proxies that are known to permit or break Domain Fronting

HOLYWATER

nextjs-blog-theme